Working Exploit Published for Pre-Auth RCE Flaw in AnyDesk Linux

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. The vulnerability affects AnyDesk Linux installations prior to version 8.0.3, which was released in June 2026. Although AnyDesk issued a patch, the vendor's changelog entry described the fix only as "fixed a bug that could lead to a crash," without referencing a CVE or security advisory. The publication of the working exploit means that systems running vulnerable versions of AnyDesk Linux remain at risk of remote code execution without requiring user interaction or approval. The researchers who published the exploit have not been named in the source. No independent verification of the exploit code beyond the researchers' publication was provided. The lack of a CVE assignment and the vague changelog entry have complicated tracking and remediation efforts. AnyDesk Linux users are strongly advised to upgrade to version 8.0.3 or later immediately.